Overview

overview

10

Static

static

625a197388...a5.exe

windows7-x64

10

625a197388...a5.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    625a1973885e71b410d9fa0c5f8532cf4ba62dfbe6230476bd7e7ac2478987a5

  • Size

    91KB

  • Sample

    221206-wd8g5sac28

  • MD5

    20486a758f537d71423c2f3f091b7180

  • SHA1

    bf777063f3e67df7ff26cf89ba5a839e5c6fee7b

  • SHA256

    625a1973885e71b410d9fa0c5f8532cf4ba62dfbe6230476bd7e7ac2478987a5

  • SHA512

    0ab6e78a3d0a6c21f21bb25f46fddc7a0601ba27d6c6f83cbb88b8f8bf79e2325b4a2c40bb9d962ed9f6da336ed9634f51885ba01218eefc91576d80cb7f1707

  • SSDEEP

    1536:t60hzjzldHhKgWuYQdFYXtL6af4wGTMLRQ+jmVZvuLJM85YjNd3daTF62xqE42NK:t605zVKCiXoaf4wfy+QxuNM85mdG62xU

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      625a1973885e71b410d9fa0c5f8532cf4ba62dfbe6230476bd7e7ac2478987a5

    • Size

      91KB

    • MD5

      20486a758f537d71423c2f3f091b7180

    • SHA1

      bf777063f3e67df7ff26cf89ba5a839e5c6fee7b

    • SHA256

      625a1973885e71b410d9fa0c5f8532cf4ba62dfbe6230476bd7e7ac2478987a5

    • SHA512

      0ab6e78a3d0a6c21f21bb25f46fddc7a0601ba27d6c6f83cbb88b8f8bf79e2325b4a2c40bb9d962ed9f6da336ed9634f51885ba01218eefc91576d80cb7f1707

    • SSDEEP

      1536:t60hzjzldHhKgWuYQdFYXtL6af4wGTMLRQ+jmVZvuLJM85YjNd3daTF62xqE42NK:t605zVKCiXoaf4wfy+QxuNM85mdG62xU

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks